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Set Items Description 

51 408 SMARTCARD? OR CHIPCARD? OR ICCARD? OR MONDEX? OR PHYSICAL (- 

) TOKEN? OR (SMART OR CHIP OR IC) {)CARD? ? 

52 22959 POWER? OR VOLTAGE? OR AMP OR AMPS OR AMPERE? OR WATT? ? OR 

CURRENT? 

53 464 S2(2N) (CONTROL? OR FLUCTUAT? OR CHANG? OR VARY OR VARIES OR 

CHANG? OR MODERATE OR MEASUR? OR MONITOR?) 

54 249 S1(15N) (ENCRYPT? OR CRYPTO? OR SECUR? OR SAFE? OR DES OR R- 

SA OR PROTECT? OR ENCIPHER? OR ENCYPHER? OR SPA OR TA OR ATTA- 
CK? OR DPA) 

55 2 S3 (S) S4 

56 3 S3 (S) SI 

57 0 S6 (S) (LINE? OR BUS OR BUSSES OR PATH OR PATHS OR ROUTE OR 

ROUTES OR WIRE OR WIRES) 

58 0 S1(5N) (SPA OR TA OR DPA OR SIMPLE () POWER () ANALYSIS OR DIFF- 

ERENTIAL () POWER () ANALYSIS OR TIMING 0 ATTACK?) 

59 1 S3(5N)S4 

510 1 S9 OR S7 

511 2 S3 AND S4 

512 3 S6 OR Sll 



File 256 : Sof tBase : Reviews, Companies& Prods . 82-2004 /Mar 
(c)2004 Info. Sources Inc 



Set Items Description 

51 30973 SMARTCARD? OR CHIPCARD? OR ICCARD? OR MONDEX? OR PHYSICAL (- 

) TOKEN? OR (SMART OR CHIP OR IC) ( ) CARD? ? 

52 2900693 POWER? OR VOLTAGE? OR AMP OR AMPS OR AMPERE? OR WATT? ? OR 

CURRENT? 

53 384258 S2 (2N) {CONTROL? OR FLUCTUAT? OR CHANG? OR VARY OR VARIES OR 

MODERATE OR MEASUR? OR MONITOR?) 

54 2001956 ENCRYPT? OR CRYPTO? OR SECUR? OR SAFE? OR DES OR RSA OR KE- 

Y? ? OR PROTECT? OR ENCIPHER? OR ENCYPHER? OR ATTACK? OR SPA - 
OR TA OR DPA 

55 130 SI AND S3 AND S4 

56 17 S5 AND IC= (G06F-015/16 OR G06F-012/14 OR G06F-007/10) 

57 52 S5 AND MC=(T01-D01 OR T01-F05B3 OR T01-H01B3A OR T01-H01C2 

OR T01-J12C OR T04-K02 OR T05-H02C5C OR U21-C02) 

58 4005 SI (ION) (S3 OR S4) 

59 34 S7 AND S8 

510 41 S6 OR S9 

511 41 IDPAT (sorted in duplicate/non-duplicate order) 

512 41 IDPAT (primary/non-duplicate records only) 

513 39 S5 AND (LINE? OR BUS OR BUSSES OR WIRE? OR CONNECTION? OR - 

PATH? OR ROUTE?) 

514 28 S13 NOT Sll 

515 6 S14 AND IC=(G06F? OR H04K?) 

516 6 IDPAT (sorted in duplicate/non-duplicate order) 

517 6 IDPAT (primary/non-duplicate records only) 



File 347:JAPIO Nov 197 6-2003/Dec ( Updated 040402) 

(c) 2004 JPO & JAPIO 
File 350:Derwent WPIX 1963-2004 /UD, UM &UP=200427 

(c) 2004 Thomson Derwent 



Xl/S/1 (Item 1 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2004 Thomson Derwent . All rts. reserv. 

014587286 **Image available** 

WPI Acc No: 2002-407990/200244 

XRPX Acc No: N02-320502 

Method for disguising the electrical power consumption of an integrated 
circuit during execution of a confidential operation by activating a 
charge pump so that any power variations due to the confidential actions 
are masked 

Patent Assignee: STMICROELECTRONICS SA (SGSA ); STMICROELECTRONICS (SGSA 
) 

Inventor: WUIDART S 

Number of Countries: 022 Number of Patents: 004 
Patent Family: 
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WO 2001FR2796 
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20010910 


200244 


EP 
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Al 


20030611 


EP 2001967463 
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20010910 


200339 










WO 2001FR2796 
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20010910 




US 


20030219126 


Al 


20031127 


WO 2001FR2796 
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20010910 


200378 N 










US 2003388324 
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20030312 





Priority Applications (No Type Date): FR 200011696 A 20000914; US 

2003388324 A 20030312 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
FR 2813972 Al 17 G06K-019/073 
WO 200223312 Al F G06F-001/00 

Designated States (National) : JP US 

Designated States (Regional): AT BE CH CY DE DK ES FI FR GB GR IE IT LU 
MC NL PT SE TR 

EP 1317701 Al F G06F-001/00 Based on patent WO 200223312 

Designated States (Regional): AT BE CH CY DE DK ES FI FR GB GR IE IT LI 
LU MC NL PT SE TR 

US 20030219126 Al H04N-007/167 Cont of application WO 2001FR2796 

Abstract (Basic) : FR 2813972 Al 

NOVELTY - During a confidential operation such as reading 
confidential data stored in the integrated circuit or calculation of a 
cryptographic code, a charge pump is activated such that it generates 
fluctuations in the power supply line to the integrated circuit, 
such that any power variations due to the confidential operations are 
masked. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is made for an 
integrated circuit with a device (CPU) capable of activating a charge 
pump such that the power consumption during confidential operations is 
masked . 

USE - Prevention of fraud, particularly relating to chip cards . 

ADVANTAGE - Invention provides a simple and effective method for 
thwarting fraud attempts made using power analysis. 

DESCRIPTION OF DRAWING (S) - Figure show a circuit according to the 
invention . 

integrated circuit. (10) 

pp; 17 DwgNo 2/5 

Title Terms: METHOD; DISGUISE; ELECTRIC; POWER; CONSUME; INTEGRATE; CIRCUIT 
; EXECUTE; CONFIDE; OPERATE; ACTIVATE; CHARGE; PUMP; SO; POWER; VARIATION 
; CONFIDE; ACTION; MASK 

Derwent Class: T04; U24; WOl 

International Patent Class (Main): G06F-001/00 ; G06K-019/073; 
H04N-007/167 

International Patent Class (Additional) : H04L-009/06; H04L-009/32 
File Segment: EPI 



Set Items Description 

51 155 AU=(KAMINAGA M? OR KAMINAGA, M?) 

52 5682 AU=(ENDO T? OR ENDO, T?) 

53 626 AU=(OHKI M? OR OHKI, M?) 

54 1970 AU= (TSUKAMOTO T? OR TSUKAMOTO, T?) 

55 13 AU=(WATASE H? OR WATASE, H?) 

56 A AU-(TERAUCHI C? OR TERAUCHI, C?) 

57 54 7 AU=(NAKADA K? OR NAKADA, K?) 

58 22 AU= {NAGASAKI N? OR NAGASAKI, N?) 

59 373 AU=(TAIRA S? OR TAIRA, S?) 

510 6 AU-(NARIYOSHI Y? OR NARIYOSHI, Y?) 

511 276 AU-{FUKUZAWA Y? OR FUKUZAWA, Y?) 

512 0 SI AND S2 AND S3 AND S4 AND S5 AND S6 AND S7 AND S8 AND S9 

AND SIO AND Sll 

513 68508 SMARTCARD? OR (CHIP OR SMART OR IC OR PCMCIA) () (CARD OR CA- 

RDS) OR CHIPCARD? OR ICCARD? OR MONDEX 

514 2 S13 AND (S1:S11) 

515 1 S14 AND (POWER? OR WATT? OR VOLT? OR ELECTRICIT?) 

516 0 S14 AND (SENSE 0 AMPLIFIER?) 

517 1 S12 OR (S15 OR S16) 
File 2:INSPEC 1969-2004 /Apr W3 

(c) 2004 Institution of Electrical Engineers 
File 6:NTIS 1964-2004 /Apr W4 

(c) 2004 NTIS, Intl Cpyrght All Rights Res 
File 8:Ei Compendex ( R) 1970-2004 /Apr W3 

(c) 2004 Elsevier Eng. Info. Inc. 



File 34:SciSearch(R) Cited Ref Sci 1990-2004 /Apr W4 

(c) 2004 Inst for Sci Info 
File 35 : Dissertation Abs 'Online 18 61-2004 /Apr 

(c) 2004 ProQuest Inf o&Learning 
File 65: Inside Conferences 1993-2004 /Apr W4 

(c) 2004 BLDSC all rts. reserv. 
File 95:TEME-Technology & Management 1989-2004/Apr W2 

(c) 2004 FIZ TECHNIK 
File 148: Gale Group Trade & Industry DB 1976-2004 /Apr 30 

(c)2004 The Gale Group 
File 160:Gale Group PROMT (R) 1972-1989 

(c) 1999 The Gale Group 
File 275:Gale Group Computer DB(TM) 1983-2004/Apr 30 

(c) 2004 The Gale Group 
File 636:Gale Group Newsletter DB(TM) 1987-2004 /Apr 30 

(c) 2004 The Gale Group 
File 647: CMP Computer Fulltext 1988-2004/Apr W3 

(c) 2004 CMP Media, LLC 
File 674:Computer News Fulltext 1989-2004/Apr W3 

(c) 2004 IDG Communications 



14/3, K/1 (Item 1 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2004 Institution of Electrical Engineers. All rts. reserv. 

7270113 INSPEC Abstract Number: B2002-06-1265D-052, C2002-06-5320M-002 
Title: Sensing technology for low-voltage operation FRAM 
Author{s): Endo, T. ; Yamamoto, A.; Kawashima, S. 
Journal: Fujitsu vol.53, no. 2 p. 100-4 
Publisher: Fujitsu, 

Publication Date: 2002 Country of Publication: Japan 

CODEN: FUJTAR ISSN: 0016-2515 

SICI: 0016-2515 ( 2002 ) 53 : 2L . 100 : STVO; 1-N 

Material Identity Number: D926-2002-002 

Language: Japanese 

Subfile: B C 

Copyright 2002, lEE 

Author (s): Endo, T. ; Yamamoto, A.; Kawashima, S. 

Abstract: The important requirements for smart card LSI chips are low 
power consumption, nonvolatile storage, and high-speed rewrite operation to 
reduce processing time. A smart card is an IC card that contains a 
microcomputer, storage circuit, and RF circuit. The ferroelectric RAM 
(FRAM) has been. . . 

...Descriptors: smart cards 

...Identifiers: smart card LSI chips 



14/3, K/2 (Item 2 from file: 2) 

DIALOG (R) File 2: INSPEC 

(c) 2004 Institution of Electrical Engineers. All rts. reserv. 

5598297 INSPEC Abstract Number: C9707-5130-009 
Title: Smart card microprocessors for electronic money systems 
Author(s): Sato, T.; Tanaka, T.; Nakada, K. ; Takeshima, M. 
Journal: Hitachi Review vol.4 6, no . 1 p. 31-6 
Publisher: Hitachi, 

Publication Date: Feb. 1997 Country of Publication: Japan 

CODEN: HITAAQ ISSN: 0018-277X 

SICI: 0018-277X (199702) 46: IL. 31: SOME; 1-8 

Material Identity Number: H006-97003 

Language: English 

Subfile: C 

Copyright 1997, lEE 

Title: Smart card microprocessors for electronic money systems 

Author{s): Sato, T.; Tanaka, T.; Nakada, K. ; Takeshima, M. 
Abstract: Smart cards , which are formed by embedding a semiconductor 
chip in a thin plastic card, are fast... 

...cards. This technology features large data storage capability and a high 
level of data security. Smart cards are indispensable when implementing 
electronic settlement systems using electronic money, and have an important 
role . . . 

... economic media that can be a substitute for cash value. This work will 
describe the Mondex electronic cash system in which Hitachi Ltd. is a key 
participant. The microprocessor used for... 

various functions, including large capacity data storage and a 
particularly high level of data security. Mondex will form the basis for 
future electronic settlement systems. In addition, it is becoming clear 
that smart cards technology will become widely used in the area of 

credit cards. Hitachi has developed a variety of microcomputers for smart 

cards and is rapidly becoming a leading company in this field. 

...Descriptors: smart cards 

Identifiers: smart card microprocessors... 





Items 


Description 




Q 1 


Z0K> 


HU— t JAAMllNAbA Mr UK IxAiXlXINHtjH, M r J 




C 9 




AU— ^r^JNlUU 1 r UK rjINLJU/ i rj 




bo 


o n "3 


AU— iUnr\l Mr UK Unr\i, Mr) 






Zhd / 


AU— 1 i bUtvAMU i U ir UK lbUr\AMUiU/ i r /' 




bo 


1 J 1 


AU— iWAiAbcj Mr UK WAiAbb, nrj 




bo 




AU— 1 J. hjKAUL-Hi L. r UK IhjKAUUni, . ) 




b / 




AU— ^INArvAUA 1\ r UK NAxvAUA, * J 




bo 




AU— [ NACjAoAKI N r UK NAbAbAlxl , N r ; 




b y 


n c; 
DUO 


7\n / 'P7\T'DA CO r^'D "PATDA CO\ 

AU— t iAlKA br UK iAlKA/ brj 




blU 


1 Q 


7\ n / "M A D T V/^C U T V O M A ID T V/^ C LJ T VO\ 

AU— ( NAKi lUbnX ir UK NAKliUbnl/ irj 




b 1 1 


323 


AU=(FUKUZAWA Y? OR FUKUZAWA, Y?) 




CIO 


2 


SI AND S2 AND S3 AND S4 AND S5 AND 86 AND 87 AND S8 AND 


by 




AND SIO AND Sll 




b 1 J 


48871 


8MARTCARD? OR (CHIP OR SMART OR IC OR PCMCIA) () (CARD OR 


LA- 




RDS) OR CHIPCARD? OR ICCARD? OR MONDEX 




b 1 ^ 


125 


813 AND (81:811) 




b 1 0 


39 


S14 AND (POWER? OR WATT? OR VOLT? OR ELECTRICIT?) 




b J- D 


1 


814 AND (SENSE 0 AMPLIFIER?) 




C 1 7 
b 1 / 


39 


812 OR (815 OR 816) 




S18 


39 


IDPAT (sorted in duplicate/non-duplicate order) 




S19 


33 


IDPAT (primary/non-duplicate records only) 




File 


347: JAPIO 


Nov 1976-2003/Dec (Updated 040402) 





(c) 2004 JPO & JAPIO 
File 348: EUROPEAN PATENTS 1978-2004 /Apr W02 

(c) 2004 European Patent Office 
File 349:PCT FULLTEXT 1979-2002/UB=20040415, UT=20040408 

(c) 2004 WIPO/Univentio 
File 350:Derwent WPIX 1963-2004 /UD, UM &UP=200427 

(c) 2004 Thomson Derwent 



19/5/1 (Item 1 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2004 Thomson Derwent . All rts. reserv. 

016111074 **Iinage available** 

WPI Acc No: 2004-268950/200425 

XRPX Acc No: N04-212754 

Memory accessing method for e.g. mobile phone, involves accessing memory 
portions associated with respective hamming distances , such that 
difference between distances is not more than predefined value 

Patent Assignee: HITACHI LTD (HITA ) 

Inventor: ENDO T ; KAMINAGA M ; WATANABE T 

Number of Countries: 032 Number of Patents: 002 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 20040064715 Al 20040401 US 2003452138 A 20030603 200425 B 

EP 1406145 A2 20040407 EP 200313398 A 20030618 200425 

Priority Applications (No Type Date) : JP 2002288204 A 20021001 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 20040064715 Al 19 G06F-012/14 
EP 1406145 A2 E G06F-001/00 

Designated States (Regional): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB 

GR HU IE IT LI LT LU LV MC MK NL PT RO SE SI SK TR 

Abstract (Basic) : US 20040064715 Al 

NOVELTY - The move instructions, conditional branch and jump 
instructions which have specific program counter starting address are 
executed. The memory portions associated with respective hamming 
distances, are accessed such that the difference between the distances 
is not more than predefined value. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following: 

(1) information processing device; and 

(2) computer readable medium storing memory access program. 
USE - For accessing memory of an information processing device 

(claimed) such as integrated circuit ( IC ) card e.g. smart card 
and subscriber identification module (SIM) card used in global system 
for mobile communication (GSM) mobile phone e.g. GSM mobile radio 
telephone system and in other mobile terminals used for user 
authentication and electronic commerce, 

ADVANTAGE - Since constant hamming distances of data is maintained, 
power consumption caused due to address changes is reduced. 
Extraction of user information of card is difficult. 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of the 
memory. 

pp; 19 DwgNo 6/8 

Title Terms: MEMORY; ACCESS; METHOD; MOBILE; TELEPHONE; ACCESS; MEMORY; 

PORTION; ASSOCIATE; RESPECTIVE; HAMMING; DISTANCE; DIFFER; DISTANCE; MORE 

; PREDEFINED; VALUE 
Derwent Class: TOl; T04; WOl 

International Patent Class (Main) : G06F-001/00; G06F-012/14 
File Segment: EPI 



19/5/2 (Item 2 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2004 Thomson Derwent . All rts. reserv. 



013882996 **Image available** 
WPI Acc No: 2001-367209/200138 
XRPX Acc No: NOl-267963 

Device, program or system for processing secret information 

Patent Assignee: HITACHI LTD (HITA ); HITACHI SEISAKUSHO KK (HITA ) 
Inventor: FUKUZAWA Y ; MIYAZAKI K; TAKARAGI K 
Number of Countries: 026 Number of Patents: 007 
Patent Family: 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 


WO 


200124439 


Al 


20010405 


WO 


99JP5353 
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19990929 


200138 B 


AU 


9959992 
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20010430 


AU 


9959992 
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19990929 


200142 










WO 


99JP5353 
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19990929 




EP 


1217783 


Al 


20020626 


EP 


99973813 
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19990929 


200249 










WO 


99JP5353 
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19990929 




KR 


2002025630 
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20020404 


WO 


99JP5353 
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19990929 


200267 










KR 


2000709164 
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20000819 




JP 


2001527499 
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20030422 


WO 


99JP5353 
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19990929 


200336 










JP 


2001527499 


A 


19990929 




KR 


373669 
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20030226 


wo 


99JP5353 
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19990929 


200345 










KR 


2000709164 
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20000819 




AU 


762650 
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20030703 


AU 


9959992 
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19990929 


200354 










wo 


99JP5353 
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19990929 





Priority Applications (No Type Date) : WO 99JP5353 A 19990929 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 200124439 Al J 56 H04L-009/10 

Designated States (National) : AU CA CN JP KR SG US 

Designated States (Regional) : AT BE CH CY DE DK ES FI FR GB GR IE IT LU 
MC NL PT SE 

AU 9959992 A H04L-009/10 Based on patent WO 200124439 

EP 1217783 Al E H04L-009/10 Based on patent WO 200124439 

Designated States (Regional) : AT BE CH CY DE DK ES FI FR GB GR IE IT LI 

LU MC NL PT SE 
KR 2002025630 A G06F-015/00 

JP 2001527499 X H04L-009/10 Based on patent WO 200124439 

KR 373669 B G06F-015/00 Previous Publ . patent KR 2002025630 

Based on patent WO 200124439 
AU 762650 B H04L-009/10 Previous Publ. patent AU 9959992 

Based on patent WO 200124439 

Abstract (Basic) : WO 200124439 Al 

NOVELTY - A secure cryptographic device such as of an IC card 
capable of resisting an attacking method for inferring the internally 
stored secret information, such as TA (Timing Attack) , DPA 
(Differential Power Analysis) or SPA (Simple Power Analysis) . The 
internally held secret information is operated in a different manner 
each time by expressing the secret information and other information 
used for the operation, thereby making different the operation time, 
the intensity of radiated electromagnetic wave, and the current 
consumption . 

USE - Device, program or system for processing secret information 

DESCRIPTION OF DRAWING (S) - IC card (1001) 

Operational processing unit (1002) 

Data storage unit (1004) 

Program storage unit (1005) 

Secret key portion information dA (1007) 

Secret key portion information dB (1008) 

System key (1009) 

Expression conversion program (1010) 
Elliptical curve cipher decoding program (1011) 
Common key cipher decoding program (1012) 
Decoding point R (1013) 
Enciphered message m (1014) 



Decoded message m' (1015) 

Input (A) 

Output (B) 

pp; 56 DwgNo 1/12 
Title Terms: DEVICE; PROGRAM; SYSTEM; PROCESS; SECRET; INFORMATION 
Derwent Class: TOl; T04; WOl 

International Patent Class (Main) : G06F-015/00; H04L-009/10 
International Patent Class (Additional) : G06F-012/14; G06K-017/00 
File Segment: EPI 



19/5/3 (Item 3 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2004 Thomson Derwent. All rts. reserv. 

013834529 **Image available** 
WPI Acc No: 2001-318741/200134 
XRPX Acc No: NOl-229079 

Data processing apparatus offering high level of security such as 

computer system particularly microcomputer system 
Patent Assignee: HITACHI LTD (HITA ); HITACHI ULSI SYSTEMS CO LTD (HISC ) 

; HITACHI MICON SYSTEM KK (HITA-N) 
Inventor: ENDO T ; FUKUZAWA Y ; KAMINAGA M ; NAGASAKI N ; NAKADA K ; 

NARIYOSHI Y ; OHKI M ; TAIRA S ; TERAUCHI C ; TSUKAMOTO T ; WATASE H 

Number of Countries: 028 Number of Patents: 004 



Patent Family: 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 


EP 


1073021 


A2 


20010131 


EP 


2000113051 
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20000623 


200134 


JP 


2001005731 
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20010112 


JP 


99178750 


A 


19990624 


200134 


KR 


2001021026 
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20010315 


KR 


200034770 


A 


20000623 


200159 


TW 


544577 


A 


20030801 


TW 


2000111893 


A 


20000616 


200411 



Priority Applications (No Type Date) : JP 99178750 A 19990624 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 1073021 A2 E 77 G07F-007/10 

Designated States (Regional) : AL AT BE CH CY DE DK ES FI FR GB GR IE IT 

LI LT LU LV MC MK NL PT RO SE SI 
JP 2001005731 A 40 G06F-012/14 

KR 2001021026 A G06F-015/16 
TW 544577 A G06F-012/14 

Abstract (Basic) : EP 1073021 A2 

NOVELTY - Apparatus includes at least a first information 
processing device (0101) connected to a signal line (0113) . A device 
(0114) changes power consumption on the signal line during 
transmission of signal through the signal line in accordance with the 
actual sate of power consumption that would be observed when the 
device is not used. When a second information-processing device (0102) 
is connected to the signal line, the data processing apparatus 
determines a state of second power consumption for the state of first 
power consumption on the signal line during signal transmission along 
the signal line between the information processing devices. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are made for: 1. 
Information memory device for storing several pieces of information at 
same storing locations; 2. Data processing apparatus comprising at 
least an external information memory device, information processor 
including internal information memory device and a signal line 
connecting external memory device to information processor and 
information transfer control device; 3. A card comprising at least two 
information processing devices connected by a signal line; and 4. An 
information processing system comprising at least a terminal and a card 
connectable to one another. 

USE - In information processing apparatus, which offers high level 
of security. 

ADVANTAGE - Provides card with high level security, represented by 
IC card or smart card . Lowers degree of relationship between 
data processing in microcomputer chip and its power consumption. 

DESCRIPTION OF DRAWING (S) - Drawing shows a diagram of basic 
configuration of first embodiment of data processing apparatus 
specified in the present application for a patent. 

Information processing device (0101, 0102) 

Signal line (0113) 

Device for changing power consumption (0114) 
pp; 77 DwgNo 5/40 
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At tack -resistant cryptographic method and apparatus 

Angriff sresistente kryp to graph ische Verfahren und Vorrichtung 

Precede et appareil cryptographique resistant aux attaques 
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ABSTRACT EP 1244077 A2 

It is an object of the disclosed technology to provide a tamper 
resistance device such as a card member having high security. The 
disclosed technology provides a solution to problems by reduction of the 
degree of relationship between information processed in the card member 
such as a chip for an IC card and current consumption for the 
processing . 

As a means for solving the problem, there is provided a method for 
reducing the degree of relationship between the magnitude of a current 
consumed by the chip for an IC card and information processed by the 
chip. In accordance with this method, information is transformed by using 
data for disturbance of the information prior to processing and, after 
the processing of the transformed data, the processed transformed 
information is subjected to inverse transformation using the data for 
disturbance of the information to result in correct processed 
information. The method is characterized in that the hamming weight of 
the data for disturbance of information is all but constant. 
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Tamper-resistant processing method 
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ABSTRACT EP 1239365 A2 

The subject of the disclosed technology is, when a crypto-processing is 
performed utilizing an information processing device buried in an IC 
card , etc., to decrease the relationship between the waveform of the 
consumption current and the contents of the crypto-processing as a 
countermeasure against a tamper which observes the waveform of a 
consumption current . 

A solution means is shown in the following. When a decryption 
processing of an RSA cryptogram is performed according to CRT, in step 
608, for every unit bit block of XP a modular exponentiation calculation 
is performed, and the partial result of CP up to the calculated bit block 
is stored in a memory. In step 609, for every unit bit block of XQ a 
modular exponentiation calculation is performed and the partial result of 
CQ up to the calculated bit block is stored in a memory. In step 606, a 
random number is generated, and in step 607, it is decided that step 608 
is to be executed or step 609 is to be executed corresponding to the 
value of the random number. 
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Fault detection method for cryptographic process 
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ABSTRACT EP 1237322 A2 

The disclosed techniques are as shown below. The subject of the 
invention is to provide a crypto-processing method capable to confront an 
attack, which intentionally causes an erroneous operation and takes out 
secret information to be done against a device which performs a 
crypto-processing inside the device such as an IC card . 

The solution means for such an attack is shown below. A ciphertext C is 
received through the I/O port on an IC card , etc. (step 601), the 
ciphertext C is stored on a RAM (step 602), a decryption process of the 
ciphertext C is performed (step 603), and the processing result Z is 
stored on a RAM (step 604). For the processing result Z, an encryption 
process is executed (step 605), and the processing result W and the 
original plaintext C are compared with each other (step 606) . When the 
processing result W coincides with the original plaintext C, the 
plaintext Z is output to the I/O port (step 608), and if not, a reset is 
effected (step 607) . 
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ABSTRACT EP 1189157 A2 

The present invention provides an IC card that allows a service 
provider doing a business of loading an application into the IC card 
to dynamically load the application into the IC card safely after the 
issuance of the IC card without making a contract directly with a 
card issuer issuing the IC card and without establishing a 
communication with the card issuer. The present invention also provides 
an IC - card issuing method for issuing the IC card and an IC - 
card operating method using the IC card .The card issuer issuing the 
IC card hands over an encryption key in advance to a third party other 
than the card issuer in order to entrust the third party with work to 
authenticate an application to be loaded or to allow the third party to 
function as an agent on behalf of the card issuer. The card issuer issues 
an agent certification to the third party to be used as evidence showing 
that the third party is an agent representing the card issuer. A program 
having a function to verify validity of the agent certification into the 
IC card is capable of verifying validity of an application to be 
loaded. 
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IC CARD AND SEMICONDUCTOR INTEGRATED CIRCUIT DEVICE 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide an IC card and a semiconductor 
integrated circuit device realizing the enhancement of security. 

SOLUTION: In the IC card or semiconductor integrated circuit device 
which includes a data processor and a ROM where data processing procedures 
including security information processing by such a data processor are 
written and to which an operation voltage is applied by such a manner 
that an external terminal is electrically connected to an external device 
such as a reader-writer and in which a data processing operation following 
the data processing procedures is performed, the security is obtained by 
making it substantially impossible to perform data dependence analysis such 
as to compare a current waveform on the time base because the procedure and 
timing for cipher processing change every time and a consumption current 
waveform in the case of being seen from a time base change by providing a 
means that makes the timing of the data processing procedures change. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide an IC card and a semiconductor 
integrated circuit device, whose security is strengthened. 

SOLUTION: In the integrated circuit device which includes the IC card 
or a data processor to which operation voltage is supplied by 
electrically connecting an external terminal and a reader/writer and in 
which the input/ output operation of data is executed and a ROM in which a 
data processing procedure by the data processor is written and in which the 
input/output operation of data is executed according to the data processing 
procedure, a false current generation circuit 210 generating current made 
to be an irregular current value regardless of an inner circuit operation 
accompanying the input/tout operation of data between the reader/writer and 
the external device and making current flow to a power terminal to which 
operation voltage is supplied is installed. 
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information by monitoring power signals. In Kocher et ai . , a specific 
DPA attack against smart cards running the DES algorithm was 

described. As few as 1000 encryptions were sufficient to recover the 
secret key. We generalize the DPA attack to elliptic curve (EC) 
cryptosystems and describe a DPA on EC Dif f ie-Hellman key exchange and EC 
El-Gamal type encryption . . Those attacks enable us to recover the 
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Abstract: This paper presents actual results from monitoring smart card 
power signals and introduces techniques that help maximize such 

side-channel information. Adversaries will obviously choose attacks that 
maximize side-channel information, so it is very important that the 
strongest attacks be considered when designing defensive strategies. In 
this paper, power analysis techniques used to attack DES are reviewed and 
analyzed. The noise characteristics of the power signals are examined and 
an approach to model the signal to noise ratio is proposed. Test results 
from monitoring power signals are provided. Next, approaches to 
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cubic packing — fills space more efficiently than any other 
arrangement of identical spheres (154: 103*). 

* Cryptographers showed that monitoring the power usage of a 
smart card *s microcircuitry can provide data for breaching the card's 
security (153: 388*) . They also dramatically reduced the time required to 
identify the numerical key for... 
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That microcircuitry also makes it vulnerable to attack . 
Cryptographers have now identified techniques for breaking the security 
system built into a smart card . They cracked the codes by monitoring 
power consumption as the circuitry performed its cryptographic operations. 
"We have implemented these attacks against a... 

...or exploited processing errors (SN: 2/1/97, p. 78). 

In the new threat, an attacker can use less expensive equipment to 
monitor a smart card 's electronic responses. Fluctuations in power 
consumption correspond to different stages in a cryptographic process. By 
magnifying the signal, it is possible to detect individual microprocessor 
instructions and distinguish... 
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... at The Tower Group, Newton, Mass. 

The West Coast cryptographers, led by Paul Kocher of Cryptography 
Research, a San Francisco consulting firm, obtained the secret encryption 
keys from a smart card through a technique called differential power 
analysis ( DPA ) , in which an oscilloscope measures the electrical power 

consumed during a smart card 's operations. The power consumption 
information is statistically analyzed to get information about what the... 



14/3, K/12 (Item 3 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

06000107 Supplier Number: 53383321 (USE FORMAT 7 FOR FULLTEXT) 
Attacking the Smart Card Fortress. 
Demery, Paul 

Credit Card Management, vll, n6, p26(l) 
Sept, 1998 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal ; Trade 
Word Count: 2788 

... of altering chip circuitry to mask the power consumption, and 

modifying a chip's algorithm encryption software to make it more 
difficult to determine a key by monitoring power use. 

Bull Smart Cards & Terminals, a leading supplier with more than 
100 million 
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TEXT: 

...of altering chip circuitry to mask the power consumption, and modifying 
a chip's algorithm encryption software to make it more difficult to 
determine a key by monitoring power use . 

Bull Smart Cards & Terminals, a leading supplier with more than 100 
million smart cards deployed in Europe, says... 
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Publication Language: English 
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Main International Patent Class: G06F-012/14 
Fulltext Availability: 
Detailed Description 

Detailed Description 

analyzed to find the entire secret key, compromising the system. 

In the simple power analysis ( SPA ) attacks on smart cards and 
other secure tokens, an attacker directly measures the token's power 

consumption changes over time. The amount of power consumed varies 
depending on the executed microprocessor instructions. 

A large calculation such as elliptic curve (EC) additions... 

...to expose logic gates, microprocessor operation and ultimately the 
software implementations . 

In software implementation of cryptographic routines, particularly on 
smart cards , branches in program flow are particularly vulnerable to 
power analysis measurements . 

Generally, where the program flow reaches a branch, then based on some 
distinguishing value V. . . 
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card and (2) 

knowledge of the memory card access password stored in the card's secure 
substorage unit. 

The smartcard integrated circuit advantageously stores such passwords, 
public key and secret key values, and/or digital... 

. . .via the serial interface, but thereafter prevents that password value 
from being accessed. For enhanced security , the 

smartcard integrated circuit includes means for monitoring voltages 
and 

frequencies to detect abnormal conditions which may indicate an attempt 
to tamper with the... 
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Integrated circuit chip protection method e.g. for current 
fluctuation protection , involves using random number generator with 
linear feedback shift register for emitting electromagnetic noise and 
reducing signal-to-noise ratio 
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Abstract (Basic) : US 6566858 Bl 

NOVELTY - The method involves using a random number generator 
including a linear feedback shift register (LFSR) for emitting 
electromagnetic noise and reducing the signal-to-noise ratio to obscure 
the information in the current signal flowing through the integrated 
circuit (IC) . 

USE - For protecting tamper proof integrated circuit (IC) chip 
(claimed) from current fluctuations , smart cards , 

authentication chips, electronic keys and cryptographic equipment. 
Also used as source of pseudo-random bits for other tamper prevention 
and detection circuit. Also for use in Artcam device. 

ADVANTAGE - The noise generator causes enough state changes in each- 
cycle to obscure any meaningful information in the current signal. The 
clock used for noise generator is supplied at maximum clock rate for 
chip to generate as much noise as possible. 

DESCRIPTION OF DRAWING (S) - The figure depicts an explanatory view 
of linear feedback shift register having 64-bit maximal period. 
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Method for protecting electronic component executing cryptographic 
algorithm against current measurement attack , comprises 
factorization of exponential in algorithm and permutation of the factors 
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Abstract (Basic) : FR 2818846 Al 

NOVELTY - Electronic components which execute cryptographic 
algorithms involving exponentials may be protected against current 
measurement types of attack by replacing the exponent (x) with 
factors (xl,x2, x3,xi) giving the same product, and then using a random 
permutation for the order in which the factors are processed during 
each calculation stage 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are made for a smart 
card which uses the protective method 

USE - To protect electronic components processing cryptographic 
algorithms against current measurement attack 

ADVANTAGE - The method varies the factor order for algorithm 
exponentials from one calculation stage to another making current 
measurement attack impractical 
pp; 25 DwgNo 0/0 
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Abstract (Basic): JP 2000040133 A 

NOVELTY - A control unit (10) controls one of reading mechanism 
(11) that reads out instructions from non-contact IC card (C) , 
based on reception of user demand information from information 
transmitter via information selector. Another control unit (6) supplies 
power to reading mechanism and control unit (10), only during accessing 
of non-contact IC card , DETAILED DESCRIPTION - Irreversible 
degradation of charging unit (5) by overcharge and overdischarge of 
charging current and charging voltage, is prevented by protection 
unit . 

USE - Portable non-contact IC card reader. 

ADVANTAGE - Since the electric power control unit supplies 
power to reading mechanism and another control unit only during IC 
card accessing, power consumption is reduced. DESCRIPTION OF 
DRAWING (S) - The figure shows block diagram of non-contact IC card 
reader. (5) Charging unit; (6,10) Control units; (11) Reading 
mechanism; (C) Non-contact IC card . 
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Abstract (Basic) : WO 9967766 A2 

NOVELTY - The representation of data, the number of state 
transitions at each computational step and the Hamming weights of all 
operands are independent of computation inputs, intermediate values or 
results . 

DETAILED DESCRIPTION - The method involves receiving a message for 
cryptographical processing. A hardware device performs a number of 
cryptographical suboperations on the message. Each suboperation 
involves taking an input to an output, via at least one intermediate, 
including a number of computational state transformations, where the 
number of transformations does not depend on the massage or the key . 
The Hamming weights, intermediate and output are also independent of 
the message and of the key . Finally, the cryptographically 
processed message is output. External monitoring of the hardware device 
does not reveal useful information about the secret key . 

INDEPENDENT CLAIMS are included for a balanced cryptographic 



processing device, a method for performing a balanced cryptographic 
operation using the secret data, a method for reducing the amount of 
information available for detection by monitoring the device power 
consumption, a method for converting a definition of a computational 
device for cryptography using a secret key into a definition of a 
digital circuit and a method for converting a definition of a 
computational device for cryptography into a definition of software 
whose power consumption is balanced. 

USE - For 'leaky' hardware elements, e.g. smart cards . 

ADVANTAGE - The electromagnetic radiation leakage and power 
consumption of a device employing the method does not give any clue to 
the cryptography going on inside, making the device more secure . 

DESCRIPTION OF DRAWING (S) - The figure shows an example CMOS 
integration of a leakless NAND gate. 
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TVbstract (Basic) : WO 9949416 Al 

NOVELTY - The microprocessor card has added a device (20), 
connected to the supply input, which modifies the current consumption 
of the card, by averaging, integration or adding of random values from 
a random signal generator (28) on the card. The technique can also be 
applied to masking of writing to EEPROM. 

USE - Security of smart cards and EEPROM writing process. 

ADVANTAGE - Prevents intruder determining key by monitoring 
current consumption of microprocessor on smart card as it executes 
its program. Uses a masking device to conceal the operations 
undertaken, while allowing the programmer free-choice in the rules of 
programming, which could be of the Octet Orientated type. 

DESCRIPTION OF DRAWING (S) - The drawing shows a block diagram of 
the card 

Current consumption modification device (20) 
Random signal generator (28) 
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Abstract (Basic) : EP 251853 A 

The ' smart ' card integrated circuit has a non-volatile 
programmable memory holding data on access authorisation. An 
input/output circuit (E/S) permits connection to a data transfer device 
and a processor (MP) connects input/ output and memory. The processor 
compares (COMP) access data with a code or key introduced through the 
input /output device. 

Storage is caused in a memory zone of an error bit, or of an access 
bit in a second memory zone, depending on the correctness of the 
entered code. The second memory uses a single cell which, when 
activated, consumes the same current as an unprogrammed cell in the 
first memory zone. 

ADVANTAGE - Provides security against fraudulent access by 
current monitoring to data by ensuring that access cell draws same 
current as virgin cell. 
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